This vulnerability arises from improper input validation in the printing component of Google Chrome before version 149.0.7827.53. An attacker with control over the renderer process can exploit this flaw to leak data across origins by crafting a malicious HTML page. The CVSS 3.1 base score is 6.5 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high confidentiality impact without integrity or availability impact. The issue is classified under CWE-20 (Improper Input Validation).

Successful exploitation allows an attacker who has already compromised the renderer process to leak sensitive cross-origin data, impacting confidentiality. There is no impact on integrity or availability. No known active exploits have been reported.

Patch status is not explicitly confirmed in the vendor advisory linked. Users and administrators should consult the official Google Chrome stable channel update blog for the latest updates and apply any available updates to Chrome versions newer than 149.0.7827.53. Until a patch is confirmed, avoid untrusted content that could compromise the renderer process. Monitor official Google communications for remediation guidance.